Product by Microsoft

    Microsoft System Center 2019 Operations Manager

    17 known vulnerabilities in Microsoft System Center 2019 Operations Manager (Microsoft), 4 of them actively exploited (CISA KEV).

    Key figures

    17

    Vulnerabilities

    4

    Actively exploited (KEV)

    1

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Microsoft System Center 2019 Operations Manager (Microsoft)
    CriticalCVE-2021-38647

    Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    In CISA KEVRansomwarealso in 11 other products

    		9.8
    CriticalCVE-2021-38648

    Open Management Infrastructure Elevation of Privilege Vulnerability

    In CISA KEValso in 11 other products

    		7.8
    CriticalCVE-2021-38645

    Open Management Infrastructure Elevation of Privilege Vulnerability

    In CISA KEValso in 11 other products

    		7.8
    CriticalCVE-2021-38649

    Open Management Infrastructure Elevation of Privilege Vulnerability

    In CISA KEValso in 11 other products

    		7.0
    CriticalCVE-2024-21334

    Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    also in 3 other products

    		9.8
    HighCVE-2021-41352

    SCOM Information Disclosure Vulnerability

    		7.5
    HighCVE-2021-1728

    System Center Operations Manager Elevation of Privilege Vulnerability

    		8.8
    HighCVE-2026-20967

    System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability

    		8.8
    MediumCVE-2023-36043

    Open Management Infrastructure Information Disclosure Vulnerability

    also in 3 other products

    		6.5
    HighCVE-2025-27743

    Microsoft System Center Elevation of Privilege Vulnerability

    		7.8
    Not ratedCVE-2013-0010

    Microsoft System Center Operations Manager: Cross-Site Scripting (XSS)

    		—
    HighCVE-2024-21330

    Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

    also in 10 other products

    		7.8
    Not ratedCVE-2013-0009

    Microsoft System Center Operations Manager: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2015-2420

    Microsoft System Center Operations Manager: Cross-Site Scripting (XSS)

    		—
    HighCVE-2022-29149

    Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

    also in 13 other products

    		7.8
    MediumCVE-2020-1331

    Microsoft System Center Operations Manager: Spoofing

    		5.4
    HighCVE-2022-33640

    Microsoft Open Management Infrastructure: Privilege Escalation

    also in 4 other products

    		7.8

    All products by Microsoft